Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier: TXmjh1Omed3S7AUad+bSMfHDBQuH5IrBTfCD9M3+jK4=
Subject key identifier: B0:77:69:E1:87:EF:A9:76:11:A5:58:96:86:DF:EF:AD:B3:93:26:C9
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197499EFC11CA8A0822FCACB34FD88B7502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number: 159A
Signing time: Sat 07 Jun 2025 09:00:45 +0000
Manifest this update: Sat 07 Jun 2025 09:00:45 +0000
Manifest next update: Sun 08 Jun 2025 09:00:45 +0000
Files and hashes: 1: 1-bDKpqd9IKO5rqqIeQW8oQ51t34.roa (hash: 9sRAYb2cLVUUELUPyHX1OFnXLEKmKwd0nv4wx8tY0+U=)
2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: QyUq4+WO8/ERUslIobFsBo1DsbrqFnNiV+5C+zQ658A=)
3: Dsz5uvaCfsaiJBGzDzecMewv-Ug.roa (hash: MeEoWIXoG3LOHfXQOIQXyy5qgG/yZoQCFPvU7WaAQZk=)
4: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
5: IZHMmqPmt3UlljgeogJmO322ssc.roa (hash: PycVs9gX0pMXEW+1UcglBSJJRtamvhRH7S93lKKOQPE=)
6: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
7: VZWTcHnuKRpq8GzyCubRyL1hqY8.roa (hash: OVbY/kAKvnKH5T6BoSni6A5JA5/zw2lxZl3YYIuCJGE=)
8: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:fc:11:ca:8a:08:22:fc:ac:b3:4f:d8:8b:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 7 09:00:45 2025 GMT
Not After : Jun 8 09:00:45 2025 GMT
Subject: CN=b07769e187efa97611a5589686dfefadb39326c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:14:b4:2c:da:a9:43:78:04:a2:98:13:e0:
1c:ec:82:3a:75:40:7c:cf:2b:e9:5a:8f:4f:e3:fb:
99:6d:bc:a2:9f:2f:75:5f:c1:49:c4:f8:97:4f:b5:
79:f5:99:fe:23:68:2d:94:e7:68:bd:67:2f:c6:4f:
d4:b6:70:7e:f9:52:5c:fe:0c:cb:ec:99:1f:27:5d:
aa:66:89:93:9e:5b:0b:0e:43:ee:41:3e:14:32:70:
a0:36:54:8b:ab:47:96:7e:f8:2f:3a:13:97:bb:0f:
56:83:f2:48:b8:48:21:2c:01:bc:27:d7:b7:78:c8:
bf:99:54:91:03:29:49:17:f2:bb:f3:8a:23:3f:96:
c1:f0:57:8b:cf:22:35:d8:4b:87:fa:7d:5e:7f:53:
60:42:d3:d8:65:cc:ba:15:3c:4f:43:fb:81:72:54:
49:4f:05:2b:fb:57:91:68:36:fc:76:22:0f:d0:5a:
8d:32:2b:00:c4:b6:b7:45:72:f5:7b:e9:c1:8b:3a:
6f:7b:22:91:89:32:e2:4a:f8:b9:e6:3c:0c:41:6d:
78:75:e2:bc:10:7b:14:c9:e6:fd:9d:eb:e6:bd:02:
36:f2:0c:23:8f:6a:18:4a:6d:78:cd:e4:df:f2:7a:
4e:48:86:9e:1b:fd:ac:b7:41:6e:4d:13:50:b7:48:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:77:69:E1:87:EF:A9:76:11:A5:58:96:86:DF:EF:AD:B3:93:26:C9
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:17:e3:8d:71:0a:d8:4b:71:e6:f9:c5:e3:db:6c:47:7d:49:
59:5b:df:f8:8e:71:53:1b:ef:de:22:23:69:df:24:a2:8b:de:
94:ba:0f:b2:72:43:71:ee:ea:a8:77:42:a2:2d:03:fa:da:81:
d0:37:ae:24:87:38:96:19:fd:87:cf:a0:b5:d9:87:8d:18:8e:
a4:6c:04:26:85:a7:7f:f4:e3:a7:83:86:55:00:f9:af:67:3d:
9f:9f:f2:36:5e:3e:bf:11:4e:f3:f5:89:d5:ca:b8:7f:b4:f3:
c3:2e:a4:de:07:0b:5a:b0:77:9e:14:cf:81:c1:ef:67:9f:d2:
5f:fa:e5:69:c8:e5:65:f0:05:a1:4f:1b:8e:d4:de:cb:46:09:
7c:f0:3a:d6:be:82:38:db:7e:c6:22:fa:27:ac:59:0d:b4:7b:
49:3f:48:ed:91:98:95:2a:a4:b2:f1:54:d9:8a:09:cb:69:32:
4d:4a:9e:6e:9b:9c:69:e0:84:09:a1:d7:fe:d4:12:f6:23:56:
ee:83:f2:27:d1:fa:9f:a4:18:7c:aa:0d:df:92:34:60:38:39:
38:4f:7c:39:d9:37:63:9f:94:da:04:37:3a:7c:0a:31:88:b8:
9e:2e:c4:72:2f:63:57:95:04:f3:a2:6e:79:2f:c6:45:24:dd:
0a:b9:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:15:56 2025 by rpki-client